Rhode Island alleges that Meta profited from scam advertising that used targeted delivery to reach vulnerable users, including older adults. Reported lures included fake Alzheimer’s and diabetes cures, misleading health products, and investment scams using deepfaked public figures such as Elon Musk, Donald Trump, and Mark Cuban.
This case centers on scam advertisements distributed through social media, with Rhode Island's Attorney General alleging that scam ads reached vulnerable users, including older adults, through targeted ad delivery. The ads reportedly used deepfaked video or audio of recognizable public figures, including Elon Musk, Donald Trump, Mark Cuban, and Polish President Karol Nawrocki, to lend false credibility to fraudulent offers. Reported lures spanned supposed cures for Alzheimer's, a $294 diabetes cure, misleading 'Height Gummies' claiming dramatic growth results, and fake investment opportunities.
The scams relied on a few consistent psychological levers. A familiar, trusted face lent instant credibility to an otherwise implausible claim, short-circuiting the skepticism a viewer might apply to an unfamiliar source. Health-related lures targeted people facing real and often urgent medical concerns, such as Alzheimer's or diabetes, making an unproven 'cure' emotionally appealing. Investment lures leaned on the perceived business acumen of figures like Elon Musk to suggest insider access to a lucrative opportunity. One ad reportedly went further, explicitly telling consumers to disregard professional medical advice, a signal meant to preempt a viewer's natural instinct to check with a doctor first.
Defenders and security awareness teams can use this case to reinforce a few habits. Treat any celebrity endorsement seen in a social-media ad as unverified until it is confirmed through the person's official channels or reputable news coverage. Avoid purchasing health products advertised through social media that promise a cure or tell buyers to disregard medical guidance, and instead consult a qualified healthcare professional. Apply the same skepticism to investment offers that lean on a celebrity name rather than verifiable financial disclosures. Finally, because older adults are described as particularly vulnerable to this kind of impersonation and deceptive advertising, it is worth having a direct conversation with older family members or colleagues about pausing before clicking an ad and independently verifying any offer before paying.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
It is a pattern of social-media advertisements that use deepfaked video or audio of public figures to promote fake health cures and fraudulent investment opportunities, with older adults a primary target.
Reported deepfakes used in the ads included Elon Musk, Donald Trump, Mark Cuban, and Polish President Karol Nawrocki, used to make fraudulent product and investment offers look credible.
Reported lures included a supposed Alzheimer's cure, a $294 diabetes cure, 'Height Gummies' claiming to increase a teen's height, and fake investment opportunities.
Treat celebrity endorsements in social-media ads as unverified until confirmed through official channels, avoid buying health products from ads that tell you to ignore medical advice, and be skeptical of investment offers tied to celebrity endorsements.
A Facebook ad says Mark Cuban endorses a $294 diabetes cure. His face moves. His voice sounds real. That's the trick: a deepfake endorsement in a paid ad, pushing you to click and order. Here's the giveaway: a celebrity in your feed isn't medical evidence. Similar ads pitch Alzheimer's cures and fake investments with Elon Musk or Donald Trump. Before paying for any cure or investment from an ad, check the claim outside Facebook with a qualified professional.
The article describes how “wrong-number” SMS messages are used as a first-step social engineering test to identify people who will engage with strangers. If the target replies, scammers may either build a long relationship that leads to fake investment fraud (“pig butchering”) or recycle the…
Researchers linked the Iran-aligned Handala Hack persona to a Telegram-controlled backdoor (HEAVYGRAM) that can steal passwords and exfiltrate chat data. The campaign reportedly starts with social engineering on messaging apps (Telegram, WhatsApp, Instagram), where the attacker pretends to offer…
Scammers are filing fake copyright complaints to get Instagram accounts temporarily suspended, then demanding money to “withdraw” the complaint and restore access. Victims are pushed to communicate off-platform (for example, on Telegram) and asked to pay in cryptocurrency, yet even paying doesn’t…
Researchers found a real malicious ad campaign on Meta platforms (and reused on TikTok) that pushed a fake “free TV streaming” service to Spanish-speaking users, mainly in Spain. Clicking the ad led to a tailored website that coached Android users through installing an app from outside Google Play,…
A CSC report describes real-world scams where criminals impersonate executives and brands online to steal personal or payment information. Examples include fake CEOs contacting people on LinkedIn with bogus job offers, and lookalike “FIFA” domains used for fake ticket sales, travel offers, and…
Researchers reported a real malvertising campaign where ads on Meta platforms promoted a fake TV-streaming app to Spanish-speaking users, leading them to sideload an Android app. After victims approved a chain of permissions (including Accessibility), the StreamRat trojan could remotely control the…
